What does the change mean?
Microsoft is phasing out its own SMS and voice verification in all Entra ID tenants by February 1, 2027. After that, users will no longer be able to use SMS or voice calls to complete multi-factor authentication (MFA) and sign in.
Microsoft says these methods are vulnerable to phishing, interception, and manipulation.
If you need to keep phone-based sign-in
Businesses with a genuine need for phone-based sign-in can connect a third-party telephony provider through Microsoft Security Store. There is also a temporary option to postpone the rollout – but that should be an exception, not a plan.
What we recommend
- List the users who rely on SMS or voice today
- Move them to passkeys or Microsoft Authenticator
- Finish well ahead of February 2027
How we can help
Wondering what this means for your organization? Let's talk.
Request a meeting →